1919 - ' docs/**'
2020 - ' card_data/**'
2121 - ' .gitignore'
22+ - ' .gitleaksignore'
2223 - ' demo**'
2324 - ' go.mod'
2425 - ' go.sum'
3031 - main
3132
3233env :
33- VERSION_NUMBER : ' v1.8.2 '
34+ VERSION_NUMBER : ' v1.8.3 '
3435 DOCKERHUB_REGISTRY_NAME : ' digitalghostdev/poke-cli'
3536 AWS_REGION : ' us-west-2'
3637
4647
4748 steps :
4849 - name : Checkout
49- uses : actions/checkout@v4
50+ uses : actions/checkout@v6
5051
5152 - name : Run Gosec Security Scanner
5253 uses : securego/gosec@master
@@ -58,17 +59,35 @@ jobs:
5859 with :
5960 sarif_file : results.sarif
6061
61- build-linux-packages :
62+ gitleaks :
6263 runs-on : ubuntu-22.04
63- needs : [ gosec ]
64+ needs : [gosec]
6465 if : needs.gosec.result == 'success'
66+
67+ steps :
68+ - name : Checkout
69+ uses : actions/checkout@v6
70+ with :
71+ fetch-depth : 0
72+
73+ - name : Gitleaks
74+ uses : gitleaks/gitleaks-action@v2
75+ env :
76+ GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
77+ GITLEAKS_CONFIG : ./gitleaks.toml
78+ GITLEAKS_VERSION : 8.29.0
79+
80+ build-linux-packages :
81+ runs-on : ubuntu-22.04
82+ needs : [gitleaks]
83+ if : needs.gitleaks.result == 'success'
6584 strategy :
6685 matrix :
6786 arch : [ amd64, arm64 ]
6887
6988 steps :
7089 - name : Checkout code
71- uses : actions/checkout@v4
90+ uses : actions/checkout@v6
7291
7392 - name : Set up Go
7493 uses : actions/setup-go@v5
@@ -124,7 +143,7 @@ jobs:
124143
125144 upload-deb-packages :
126145 runs-on : ubuntu-22.04
127- needs : [ build-linux-packages ]
146+ needs : [build-linux-packages]
128147 if : needs.build-linux-packages.result == 'success'
129148 strategy :
130149 matrix :
@@ -152,7 +171,7 @@ jobs:
152171
153172 upload-rpm-packages :
154173 runs-on : ubuntu-22.04
155- needs : [ build-linux-packages ]
174+ needs : [build-linux-packages]
156175 if : needs.build-linux-packages.result == 'success'
157176 strategy :
158177 matrix :
@@ -180,7 +199,7 @@ jobs:
180199
181200 upload-apk-packages :
182201 runs-on : ubuntu-22.04
183- needs : [ build-linux-packages ]
202+ needs : [build-linux-packages]
184203 if : needs.build-linux-packages.result == 'success'
185204 strategy :
186205 matrix :
@@ -208,7 +227,7 @@ jobs:
208227
209228 upload-summary :
210229 runs-on : ubuntu-22.04
211- needs : [ upload-deb-packages, upload-rpm-packages, upload-apk-packages ]
230+ needs : [upload-deb-packages, upload-rpm-packages, upload-apk-packages]
212231 if : always()
213232
214233 steps :
@@ -228,12 +247,12 @@ jobs:
228247
229248 build-docs-docker-image :
230249 runs-on : ubuntu-22.04
231- needs : [ gosec ]
232- if : needs.gosec .result == 'success'
250+ needs : [gitleaks ]
251+ if : needs.gitleaks .result == 'success'
233252
234253 steps :
235254 - name : Checkout
236- uses : actions/checkout@v4
255+ uses : actions/checkout@v6
237256 with :
238257 sparse-checkout : |
239258 docs
@@ -267,7 +286,7 @@ jobs:
267286
268287 steps :
269288 - name : Checkout
270- uses : actions/checkout@v4
289+ uses : actions/checkout@v6
271290
272291 - name : Configure AWS
273292 uses : aws-actions/configure-aws-credentials@v4
@@ -296,12 +315,12 @@ jobs:
296315
297316 lint-cli-dockerfile :
298317 runs-on : ubuntu-22.04
299- needs : [ gosec ]
300- if : needs.gosec .result == 'success'
318+ needs : [gitleaks ]
319+ if : needs.gitleaks .result == 'success'
301320
302321 steps :
303322 - name : Checkout
304- uses : actions/checkout@v4
323+ uses : actions/checkout@v6
305324
306325 - name : Lint Dockerfile
307326 uses :
' hadolint/[email protected] ' @@ -311,12 +330,12 @@ jobs:
311330
312331 build-cli-docker-image :
313332 runs-on : ubuntu-22.04
314- needs : [ lint-cli-dockerfile ]
333+ needs : [lint-cli-dockerfile]
315334 if : needs.lint-cli-dockerfile.result == 'success'
316335
317336 steps :
318337 - name : Checkout
319- uses : actions/checkout@v4
338+ uses : actions/checkout@v6
320339
321340 - name : Set up Docker Buildx
322341@@ -347,7 +366,7 @@ jobs:
347366
348367 steps :
349368 - name : Checkout
350- uses : actions/checkout@v4
369+ uses : actions/checkout@v6
351370
352371 - name : Configure AWS
353372 uses : aws-actions/configure-aws-credentials@v4
@@ -373,7 +392,7 @@ jobs:
373392
374393 steps :
375394 - name : Checkout
376- uses : actions/checkout@v4
395+ uses : actions/checkout@v6
377396
378397 - name : Set up Docker Buildx
379398@@ -420,14 +439,14 @@ jobs:
420439 severity-cutoff : critical
421440
422441 - name : Upload SARIF Report
423- uses : github/codeql-action/upload-sarif@v3
442+ uses : github/codeql-action/upload-sarif@v4
424443 with :
425444 sarif_file : ${{ steps.scan.outputs.sarif }}
426445
427446 architecture-build :
428447 runs-on : ubuntu-22.04
429- needs : [gosec ]
430- if : needs.gosec .result == 'success'
448+ needs : [gitleaks ]
449+ if : needs.gitleaks .result == 'success'
431450
432451 strategy :
433452 fail-fast : false
@@ -436,7 +455,7 @@ jobs:
436455
437456 steps :
438457 - name : Checkout
439- uses : actions/checkout@v4
458+ uses : actions/checkout@v6
440459
441460 - name : Docker Meta
442461 id : meta
0 commit comments